$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/31d36ece-9039-43a2-82a2-03e7d8e7f563.roa File: 31d36ece-9039-43a2-82a2-03e7d8e7f563.roa (raw, json) Hash identifier: jXCJ7IGO9jVULH5hMfJDBL3ZI6am68b5WeTX5YQOj3o= Subject key identifier: 86:C4:CD:AD:3E:B4:09:BF:DE:B4:40:88:1F:1D:DC:87:E8:49:72:7F Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 7E268BD53E9CC3C39A1034AEA5233C1C4212A1FD Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/31d36ece-9039-43a2-82a2-03e7d8e7f563.roa Signing time: Tue 20 May 2025 00:00:11 +0000 ROA not before: Tue 20 May 2025 00:00:11 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:26:8b:d5:3e:9c:c3:c3:9a:10:34:ae:a5:23:3c:1c:42:12:a1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: May 20 00:00:11 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=72e33e5196346b72afa9b68a5e45844b5c00dcaf83c55c05b66004432fdf6016, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:08:da:1b:27:41:f7:cd:a2:a1:ef:75:b3:da: 01:67:cc:1f:cd:33:40:18:68:04:5c:e2:6a:94:c3: b8:62:97:97:55:c8:d5:f9:9c:3d:3e:e6:54:69:97: 1c:ac:58:f4:f5:3f:be:8f:f2:c3:4e:4c:63:e3:e2: ff:ee:b2:57:c8:4e:25:6f:34:ae:1c:ce:32:a3:89: dc:be:17:e2:28:37:8f:1e:3d:0a:2e:0a:b6:9c:55: 36:b4:64:bf:1d:74:c2:9e:86:83:c6:e6:58:63:3c: 9d:d8:71:d2:2d:de:3d:e8:30:24:a6:e7:4d:e4:f3: 72:d2:f7:06:16:87:78:a9:62:30:29:75:65:cd:12: ba:c5:f4:49:c3:72:e0:ee:2c:11:95:24:53:cf:a2: ed:fa:77:f7:13:fe:02:63:56:8c:80:4d:1a:12:2e: c5:9b:e1:82:d4:c1:56:22:9a:c8:e5:75:bb:2c:18: 0f:57:48:77:29:28:5a:b1:b8:cb:ff:0e:2b:e3:d3: c0:ab:c7:ad:69:ac:3f:d3:c1:11:12:94:10:56:12: 98:cb:43:4a:6e:68:f8:9b:d2:4d:7b:1a:33:87:24: 9f:e0:c6:96:6a:73:fa:91:f6:41:0c:63:57:cf:8e: ca:89:fe:fa:3a:05:ca:17:bc:0a:ed:0e:7b:af:33: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C4:CD:AD:3E:B4:09:BF:DE:B4:40:88:1F:1D:DC:87:E8:49:72:7F X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/31d36ece-9039-43a2-82a2-03e7d8e7f563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fc::/32 Signature Algorithm: sha256WithRSAEncryption 53:15:b4:ad:63:4d:04:35:6a:a6:17:5f:f4:b4:34:26:6e:aa: 7f:ba:70:20:a3:ca:38:57:6b:70:ad:b5:35:3f:ba:e2:77:a5: 4d:14:db:b4:61:50:25:7a:77:9b:3e:bf:60:0c:02:39:16:3a: 85:0c:f2:87:22:a2:6a:11:37:ba:af:93:e1:b1:b6:9f:26:cc: 0f:d2:71:05:f8:27:74:f2:65:a2:69:52:53:ec:ba:4f:bc:7d: a0:cd:ed:8f:5b:06:d8:bb:1e:2a:3f:b8:a2:80:ee:b5:e0:0e: 24:2d:6a:07:5a:6e:3b:17:29:d9:8f:99:d1:76:cb:55:6b:6b: 20:3e:bf:d1:ca:57:e8:18:60:77:21:ea:d7:e2:d2:48:10:35: 75:b7:5a:87:8b:2d:2d:dc:62:82:18:08:4d:81:ee:df:ae:01: 77:26:4f:7d:8d:43:98:6d:5c:e9:69:9b:c9:78:8b:fc:2e:2e: 50:2c:47:5d:a9:7d:f7:6d:df:f0:15:f7:70:46:16:43:0b:31: 03:d3:7f:0c:8e:d4:46:1f:5f:cb:9e:c3:fb:48:68:97:01:0a: de:85:0e:25:30:25:98:a8:d0:7f:b3:53:d6:9f:f2:75:74:d2: d7:33:3a:dc:5f:fe:4c:00:8a:17:ed:f8:44:51:6f:dd:f0:be: 3e:50:4b:d5 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUfiaL1T6cw8OaEDSupSM8HEISof0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDUyMDAwMDAxMVoX DTI1MDYyNDIzNTk1OVowejFJMEcGA1UEBRNANzJlMzNlNTE5NjM0NmI3MmFmYTli NjhhNWU0NTg0NGI1YzAwZGNhZjgzYzU1YzA1YjY2MDA0NDMyZmRmNjAxNjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wjaGydB982ioe91s9oBZ8wfzTNA GGgEXOJqlMO4YpeXVcjV+Zw9PuZUaZccrFj09T++j/LDTkxj4+L/7rJXyE4lbzSu HM4yo4ncvhfiKDePHj0KLgq2nFU2tGS/HXTCnoaDxuZYYzyd2HHSLd496DAkpudN 5PNy0vcGFod4qWIwKXVlzRK6xfRJw3Lg7iwRlSRTz6Lt+nf3E/4CY1aMgE0aEi7F m+GC1MFWIprI5XW7LBgPV0h3KShasbjL/w4r49PAq8etaaw/08EREpQQVhKYy0NK bmj4m9JNexozhySf4MaWanP6kfZBDGNXz47Kif76OgXKF7wK7Q57rzPMwwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFIbEza0+tAm/3rRAiB8d3IfoSXJ/MB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzMxZDM2ZWNlLTkwMzktNDNhMi04MmEyLTAzZTdkOGU3ZjU2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJA+A/DANBgkqhkiG9w0BAQsFAAOCAQEAUxW0rWNNBDVqphdf9LQ0 Jm6qf7pwIKPKOFdrcK21NT+64nelTRTbtGFQJXp3mz6/YAwCORY6hQzyhyKiahE3 uq+T4bG2nybMD9JxBfgndPJlomlSU+y6T7x9oM3tj1sG2LseKj+4ooDuteAOJC1q B1puOxcp2Y+Z0XbLVWtrID6/0cpX6BhgdyHq1+LSSBA1dbdah4stLdxighgITYHu 364BdyZPfY1DmG1c6WmbyXiL/C4uUCxHXal9923f8BX3cEYWQwsxA9N/DI7URh9f y57D+0holwEK3oUOJTAlmKjQf7NT1p/ydXTS1zM63F/+TACKF+34RFFv3fC+PlBL 1Q== -----END CERTIFICATE-----Generated at Mon Jun 2 04:41:16 2025 by rpki-client